Executed when: Upgrading.

Upgrades a PKI Hub installation to 1.5.

clusterctl upgrade --iso-path <iso>

The command will prompt the following messages.

PKI Hub installation

Command prompt

Requested value

PKI Hub 1.3.1

A database is required to store authentication information. What type of database will you be using?
1) Generic external PostgreSQL database.
2) Entrust Database Appliance.
(1/2)?

"1" to select a third-party database meeeting the Database requirements

"2" to select the PKI DB Appliance or Compliance Manager databases

PKI Hub 1.3.1 connected to an LDAP provider.

LDAP user DN:

The Distinguished Name (DN) of an LDAP user with access to user data.

LDAP user password:

The password for logging into the LDAPS server

PKI Hub 1.4

—

—

See below for a command reference.

For example:

$ clusterctl upgrade --iso-path /home/sysadmin/pki-hub-1.5.0.iso
A database is required to store authentication information. What type of database will you be using?
1) Generic external PostgreSQL database.
2) Entrust Database Appliance.
(1/2)? 2
 
Please provide the database configuration:
Database Appliance Hosts (comma-separated list of 1 to 3 IP/FQDN): 10.1.141.18,10.1.141.19,10.1.141.20
Enter the Database Appliance 'secroot' user password.
 
The authenticity of the Database Appliance must be established.
Database Appliance settings:
- IP address: 10.1.141.18
  - Server Name (SNI/hostname verification): bd31dbap
- Trusted CA certificate fingerprint: (sha256:8db8fcada05963b3471661be75b6d3ae397ba743f0c043c05f8c25028ad680d4)
- Trusted CA subject: CN=CSP Database Manager Certificate Authority,O=Hytrust Inc.,C=US
 
Verify out of band before trusting.
Do you want to trust this Database Appliance? [Y/n]: Y

If the installation meets all Requirements, the command takes around 2 hours to complete. Otherwise, the command throws an error. 

-f, --iso-path <iso>

Apply the <iso> upgrade, where <iso> is the path of the ISO installation file for PKI Hub 1.5.

Mandatory: Yes.